$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/6e43b4bd-194f-30f5-8388-be72b5090ffb.roa File: 6e43b4bd-194f-30f5-8388-be72b5090ffb.roa (raw, json) Hash identifier: Nqf2MKMYh5KmcV7PjZ8v85+En02KdJw3IrSfkirR5u8= Subject key identifier: C3:67:2C:44:63:B9:19:6D:53:22:A0:66:A8:EB:F4:2B:B6:8B:0E:04 Certificate issuer: /CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Certificate serial: 010D0C9F4328584D44FA6EEFD419CF1778EEF280 Authority key identifier: 21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/6e43b4bd-194f-30f5-8388-be72b5090ffb.roa Signing time: Tue 24 Mar 2026 01:00:31 +0000 ROA not before: Tue 24 Mar 2026 01:00:31 +0000 ROA not after: Mon 22 Jun 2026 01:00:31 +0000 asID: 13511 IP address blocks: 192.155.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 28 Mar 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:fa:6e:ef:d4:19:cf:17:78:ee:f2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b Validity Not Before: Mar 24 01:00:31 2026 GMT Not After : Jun 22 01:00:31 2026 GMT Subject: CN=8ddebd54-85cd-4e0c-bc6a-a592d962102c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:71:2f:8e:d6:ce:9f:f7:28:e5:f0:43:5f:a1: e1:f9:fc:3f:3f:18:43:8f:eb:15:fc:c0:36:09:f3: 49:3d:bf:ab:61:62:de:e5:19:6c:d7:72:f8:25:b8: 2c:69:8e:5f:c1:55:1b:c6:34:97:94:e3:d7:d1:e0: ee:92:87:b3:bd:6c:30:c8:50:3a:8a:fa:f7:62:a8: 9d:89:2a:10:89:d3:56:fd:61:c6:60:75:0b:82:8d: aa:7e:02:3e:d2:5f:b0:3a:67:fb:d3:25:00:d4:e8: 83:eb:11:42:43:61:8f:fb:b7:da:a2:64:83:2b:28: a8:36:e4:e8:fa:fa:08:60:e9:93:79:b1:e5:bd:62: e0:aa:4e:85:68:d7:30:07:cc:d7:a9:d6:3d:3e:61: 92:d1:21:0e:a9:44:e9:22:5c:b9:ac:ef:96:fe:d5: 86:d3:3b:f4:52:fb:70:26:b0:cc:f5:6c:35:4a:be: b6:5d:b4:1f:0c:2c:b8:05:11:7b:5e:23:16:2b:d8: 30:ed:da:3e:b9:32:f0:d5:0f:5b:00:dc:02:e7:53: ab:a3:a9:0b:04:e4:3b:0a:fb:44:c9:6f:14:c3:fe: 91:f0:8a:f0:9a:28:d8:e1:46:ad:3c:35:6c:f9:5d: 00:68:6e:a2:4b:ca:17:b4:ac:13:a7:97:6d:82:91: fe:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:67:2C:44:63:B9:19:6D:53:22:A0:66:A8:EB:F4:2B:B6:8B:0E:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/6e43b4bd-194f-30f5-8388-be72b5090ffb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.crl X509v3 Authority Key Identifier: keyid:21:52:CF:45:67:6F:2E:6D:56:DF:30:07:88:D7:BA:9A:0B:11:EB:8D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/8a759fd5-3f57-4ee8-bc32-38ca9b72dd4b.cer sbgp-ipAddrBlock: critical IPv4: 192.155.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:8d:db:f8:ce:d2:4a:b4:39:80:aa:9a:fd:23:9d:5a:18:df: 26:72:b1:00:b8:0c:f3:62:0f:c9:ff:79:8a:77:cd:65:56:cc: ff:3c:c3:37:47:74:fa:2d:21:1e:94:fc:50:df:48:f9:21:7e: 09:f7:ea:e1:4c:9b:9f:5f:08:e6:9d:05:98:4d:53:b6:df:23: 9d:de:fd:e5:bd:70:c2:ea:1a:d1:44:96:1d:45:60:74:51:04: ac:5f:ea:71:28:13:bb:6b:73:50:b9:b6:94:d7:27:85:9f:5d: aa:cb:19:67:c7:1a:eb:58:31:41:f8:3d:fd:a4:b8:bb:f5:22: 26:77:e5:a6:d4:2b:42:d1:6f:75:bf:58:38:c3:88:5b:a5:74: 75:d7:b6:bb:61:29:eb:a7:31:5c:21:2e:d4:9b:a9:90:c6:1d: 4f:27:9e:a1:58:d5:e7:cd:f5:08:ce:81:2b:5e:15:9d:b4:78: 20:4a:79:41:c5:0b:65:9a:7c:9f:44:d9:7f:b7:a5:2d:22:08: 03:a7:7c:d1:82:07:63:df:c7:a3:1c:4e:c3:d6:23:57:17:7a: c3:6d:53:3c:eb:a4:cf:bb:ad:40:22:fc:56:23:42:a2:50:01: ae:92:48:0d:6f:fd:b4:c4:f2:c0:27:dc:82:87:c4:92:78:e4: 72:93:5a:ea -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1E+m7v1BnPF3ju8oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGE3NTlmZDUtM2Y1Ny00ZWU4LWJjMzItMzhjYTliNzJk ZDRiMB4XDTI2MDMyNDAxMDAzMVoXDTI2MDYyMjAxMDAzMVowLzEtMCsGA1UEAxMk OGRkZWJkNTQtODVjZC00ZTBjLWJjNmEtYTU5MmQ5NjIxMDJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3EvjtbOn/co5fBDX6Hh+fw/PxhDj+sV/MA2 CfNJPb+rYWLe5Rls13L4JbgsaY5fwVUbxjSXlOPX0eDukoezvWwwyFA6ivr3Yqid iSoQidNW/WHGYHULgo2qfgI+0l+wOmf70yUA1OiD6xFCQ2GP+7faomSDKyioNuTo +voIYOmTebHlvWLgqk6FaNcwB8zXqdY9PmGS0SEOqUTpIly5rO+W/tWG0zv0Uvtw JrDM9Ww1Sr62XbQfDCy4BRF7XiMWK9gw7do+uTLw1Q9bANwC51Oro6kLBOQ7CvtE yW8Uw/6R8IrwmijY4UatPDVs+V0AaG6iS8oXtKwTp5dtgpH+0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMNnLERjuRltUyKgZqjr9Cu2iw4EMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1 OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNhOWI3MmRkNGIvNmU0M2I0YmQtMTk0Zi0z MGY1LTgzODgtYmU3MmI1MDkwZmZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvOGE3NTlmZDUtM2Y1Ny00ZWU4LWJj MzItMzhjYTliNzJkZDRiLzhhNzU5ZmQ1LTNmNTctNGVlOC1iYzMyLTM4Y2E5Yjcy ZGQ0Yi5jcmwwHwYDVR0jBBgwFoAUIVLPRWdvLm1W3zAHiNe6mgsR640wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4 OC1hYmVhLWU0OTA5ZWYxYjRlMi84YTc1OWZkNS0zZjU3LTRlZTgtYmMzMi0zOGNh OWI3MmRkNGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJt8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGiN2/jO0kq0OYCqmv0jnVoY3yZysQC4DPNiD8n/eYp3zWVWzP88wzdH dPotIR6U/FDfSPkhfgn36uFMm59fCOadBZhNU7bfI53e/eW9cMLqGtFElh1FYHRR BKxf6nEoE7trc1C5tpTXJ4WfXarLGWfHGutYMUH4Pf2kuLv1IiZ35abUK0LRb3W/ WDjDiFuldHXXtrthKeunMVwhLtSbqZDGHU8nnqFY1efN9QjOgSteFZ20eCBKeUHF C2WafJ9E2X+3pS0iCAOnfNGCB2Pfx6McTsPWI1cXesNtUzzrpM+7rUAi/FYjQqJQ Aa6SSA1v/bTE8sAn3IKHxJJ45HKTWuo= -----END CERTIFICATE-----Generated at Thu Mar 26 09:56:05 2026 by rpki-client